Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Verify application does not allow setting extra CA Root certificates #146

Open
calderonth opened this issue May 9, 2023 · 1 comment
Open
Assignees
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@calderonth
Copy link

In the case of an internal deployment with custom CAs it would be beneficial to be able to use the standard verify container to validate deployment.
In essence it currently lacks the way to extend the list of default Root CAs without rebuidling.
Environment variables could be used for instance.

@calderonth
Copy link
Author

I managed to get it working using SSL_CERT_FILE and a ConfigMap in K8s but didn't feel as elegant as supported in the app directly.

@desimone desimone added the help wanted Extra attention is needed label May 11, 2023
@kralicky kralicky self-assigned this Apr 30, 2024
kralicky added a commit that referenced this issue Apr 30, 2024
This adds a new environment variable 'EXTRA_CA_CERTS' which can contain
a comma-separated list of file paths to CA certs. These certs will be
used in addition to the system defaults.
kralicky added a commit that referenced this issue Apr 30, 2024
This adds a new environment variable 'EXTRA_CA_CERTS' which can contain
a comma-separated list of file paths to CA certs. These certs will be
used in addition to the system defaults.
@kralicky kralicky added the enhancement New feature or request label May 1, 2024
kralicky added a commit that referenced this issue May 1, 2024
This adds a new environment variable 'EXTRA_CA_CERTS' which can contain
a comma-separated list of file paths to CA certs. These certs will be
used in addition to the system defaults.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

3 participants